Privacy Policy

Effective Date: September 7, 2026 • Version 1.0

FinInsight ("we", "our", or "us") provides a unified accounting intelligence gateway enabling enterprises to synchronize, consolidate, analyze, and query financial and accounting records across platforms including Tally Prime, Zoho Books, and QuickBooks Online.

        Our Commitment to Data Privacy: We implement strict tenant isolation, end-to-end credential encryption (AES-256-GCM), zero unauthorized disclosure, and automated data erasure controls to protect your enterprise financial intelligence.
      

1. Information We Collect

To provide accounting integration, AI assistant diagnostics, and multi-ledger consolidation services, we collect:

Account & Authentication Information: Name, work email address, hashed passwords, two-factor authentication (TOTP) metadata, and OAuth profile identifiers (such as Google ID) when signing in with Single Sign-On (SSO).
Accounting & Ledger Records: Invoices, receivables, payables, customer and vendor party ledgers, chart of accounts, and financial balance metrics synchronized via authorized agent nodes or OAuth connections.
System & Device Metadata: IP addresses, agent connection tokens, authorization codes, and operational audit logs recorded strictly for security, rate-limiting, and tenant access enforcement.

2. How We Use Your Information

We use synchronized and user-provided information exclusively to:

Deliver multi-ledger dashboards, aging analyses, P&L reports, and cash flow visualizations.
Power natural language financial insights, invoice lookups, and customer analytics via our AI Financial Analyst.
Authenticate authorized team members, enforce Role-Based Access Control (RBAC), and prevent unauthorized access.
Maintain cryptographic audit trails of administrative, data modification, and export operations.

3. Third-Party Integrations & Google OAuth Data

When you authenticate via Google OAuth or connect external platforms (Tally Prime, Zoho Books, QuickBooks):

Google User Data: We only request standard OpenID Connect profile information (openid, email, profile) to authenticate your identity. We do not sell, rent, or use Google user data for advertising.
Connector Credentials: Third-party OAuth refresh tokens and desktop agent keys are encrypted at rest using AES-256-GCM with authenticated tags and are never exposed in plaintext.

4. Data Retention & Erasure

We respect your enterprise data lifecycle and data ownership rights:

Tenant Isolation: All financial and customer records are bound to your Organization ID and isolated via PostgreSQL Row-Level Security (RLS).
Data Portability: Authorized administrators can export all ledger data and reports in standardized ZIP/JSON archives at any time.
Disconnect & Purge: When disconnecting an integration or requesting account closure, administrators can choose to soft-disconnect or permanently purge associated financial records.

5. Security & Protection

We maintain comprehensive security controls including HTTPS TLS encryption in transit, cryptographically signed JWT sessions, single-use OAuth CSRF state protection, rate limiting, and brute-force lockout safeguards.

6. Contact Us

If you have questions regarding this Privacy Policy or your organization's data protection settings, please contact our security team at:

privacy@fininsight.com